This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa
File: 326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa (raw, json)
Hash identifier: hC1tSwtk6P/n7XKD/XE88SOcdq8LuodINPa1HAhKd6c=
Subject key identifier: 0B:4D:0C:B3:44:EB:5C:88:FA:75:73:47:6B:32:D5:6F:27:ED:27:FD
Certificate issuer: /CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
Certificate serial: 1A5FBA6356BDA3D62291C791D26C0C9123BFC2C9
Authority key identifier: 71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa
Signing time: Fri 06 Feb 2026 05:29:34 +0000
ROA not before: Fri 06 Feb 2026 05:24:34 +0000
ROA not after: Fri 05 Feb 2027 05:29:34 +0000
asID: 215685
IP address blocks: 2a0b:4e07:5000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl
rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.mft
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5f:ba:63:56:bd:a3:d6:22:91:c7:91:d2:6c:0c:91:23:bf:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3
Validity
Not Before: Feb 6 05:24:34 2026 GMT
Not After : Feb 5 05:29:34 2027 GMT
Subject: CN=0B4D0CB344EB5C88FA7573476B32D56F27ED27FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:e5:83:fc:6c:37:c9:62:eb:18:94:81:55:
d0:0d:ce:f3:c3:c4:98:0b:23:6d:02:70:0e:19:50:
f0:6a:a8:82:0b:bc:79:55:c5:37:4d:67:31:dd:d8:
c5:3a:cc:dd:8e:6b:c5:2c:a8:78:3b:fd:64:1f:d5:
cb:d9:80:f2:ec:aa:90:84:73:f0:01:59:2b:3a:40:
1f:09:06:f2:4d:f3:7e:e6:cb:7d:cc:cc:88:e6:4a:
2d:85:7b:12:95:da:26:79:a6:91:5c:cd:64:48:08:
0d:83:6d:bc:d4:02:f9:97:b2:3c:d4:1d:b0:8f:9f:
72:3f:b4:e6:ec:19:60:50:ed:49:e0:44:36:45:5b:
a1:9f:50:75:89:f1:59:08:58:79:f2:fa:69:02:36:
af:d3:f9:e4:69:f1:cc:68:3e:b9:cc:f3:64:89:b9:
43:d2:46:a0:e6:8b:62:90:40:61:1e:85:c0:c0:2b:
83:cc:11:a4:fd:d2:62:92:be:84:9b:de:cb:be:64:
09:fb:cb:5b:b9:f2:ae:fa:64:46:bd:e7:90:87:c9:
51:6e:91:00:10:19:f8:42:2b:f4:2c:b5:83:73:3f:
a3:95:aa:24:0e:30:11:97:ab:8f:39:56:4a:9a:a1:
e7:8a:e4:e1:58:b3:95:91:fb:4e:0b:c6:4d:89:70:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4D:0C:B3:44:EB:5C:88:FA:75:73:47:6B:32:D5:6F:27:ED:27:FD
X509v3 Authority Key Identifier:
keyid:71:AD:BC:B8:05:EE:EE:44:A7:FD:C0:7C:A5:4A:D6:61:0C:81:E1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/71ADBCB805EEEE44A7FDC07CA54AD6610C81E1B3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/1/326130623a346530373a353030303a3a2f34382d3438203d3e20323135363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:5000::/48
Signature Algorithm: sha256WithRSAEncryption
2e:e3:7e:8d:b9:fc:1a:9c:2d:e1:5d:60:2a:b5:fa:00:76:16:
b0:e3:6f:b9:00:af:77:23:0f:cf:09:3e:12:a5:76:64:a4:a9:
30:95:32:22:cf:a3:32:a5:e4:6d:ca:20:bb:69:cc:bd:e9:d0:
d1:b0:06:17:f4:a4:de:9d:31:5e:0e:ba:19:d5:24:76:ae:1d:
53:aa:14:c4:ab:ad:bd:5c:b4:a4:69:52:4f:a8:81:1c:ee:ac:
30:22:91:63:80:58:47:f4:71:ec:7a:dc:be:d1:fe:38:3d:40:
85:fb:b1:9d:b5:13:1f:4d:5a:26:cf:5c:34:37:e3:c0:9c:62:
51:bb:30:4e:2a:ee:a3:ec:a4:1f:10:8d:5f:d3:88:af:a9:11:
3f:80:89:c7:f9:c7:2e:6a:17:74:38:ec:33:37:c3:dd:1c:13:
07:8c:9c:a2:ec:e2:81:86:45:42:75:34:19:59:de:25:4c:a7:
94:bc:cd:3c:56:96:41:74:45:0f:d0:1a:45:3d:25:15:43:3c:
61:1d:1b:ae:ad:05:ca:25:6f:b4:e2:e1:c0:a2:31:15:bb:46:
6d:8c:0f:1e:4f:0b:fa:0e:2d:32:62:d5:47:d7:4d:a6:09:91:
af:c3:73:63:04:1e:c7:3e:84:8f:b7:36:8c:10:d8:4b:d1:db:
21:fa:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:57:03 2026 by rpki-client